diff --git a/hieradata/nodes/ausyd1nxvm1067.main.unkin.net.yaml b/hieradata/nodes/ausyd1nxvm1067.main.unkin.net.yaml
index 7c0516c..4ec44f8 100644
--- a/hieradata/nodes/ausyd1nxvm1067.main.unkin.net.yaml
+++ b/hieradata/nodes/ausyd1nxvm1067.main.unkin.net.yaml
@@ -2,6 +2,14 @@
 networking::interfaces:
   eth0:
     ipaddress: 198.18.13.77
+  ens19:
+    ensure: present
+    family: inet
+    method: static
+    ipaddress: 10.18.15.77
+    netmask: 255.255.255.0
+    onboot: true
 networking::routes:
   default:
-    gateway: 198.18.13.254
\ No newline at end of file
+    gateway: 198.18.13.254
+docker::bip: '198.18.67.254/24'
diff --git a/hieradata/nodes/ausyd1nxvm1068.main.unkin.net.yaml b/hieradata/nodes/ausyd1nxvm1068.main.unkin.net.yaml
index c52cba9..2089753 100644
--- a/hieradata/nodes/ausyd1nxvm1068.main.unkin.net.yaml
+++ b/hieradata/nodes/ausyd1nxvm1068.main.unkin.net.yaml
@@ -2,6 +2,14 @@
 networking::interfaces:
   eth0:
     ipaddress: 198.18.13.78
+  ens19:
+    ensure: present
+    family: inet
+    method: static
+    ipaddress: 10.18.15.78
+    netmask: 255.255.255.0
+    onboot: true
 networking::routes:
   default:
-    gateway: 198.18.13.254
\ No newline at end of file
+    gateway: 198.18.13.254
+docker::bip: '198.18.68.254/24'
diff --git a/hieradata/nodes/ausyd1nxvm1069.main.unkin.net.yaml b/hieradata/nodes/ausyd1nxvm1069.main.unkin.net.yaml
index b802e58..6dc3c14 100644
--- a/hieradata/nodes/ausyd1nxvm1069.main.unkin.net.yaml
+++ b/hieradata/nodes/ausyd1nxvm1069.main.unkin.net.yaml
@@ -2,6 +2,14 @@
 networking::interfaces:
   eth0:
     ipaddress: 198.18.13.79
+  ens19:
+    ensure: present
+    family: inet
+    method: static
+    ipaddress: 10.18.15.79
+    netmask: 255.255.255.0
+    onboot: true
 networking::routes:
   default:
-    gateway: 198.18.13.254
\ No newline at end of file
+    gateway: 198.18.13.254
+docker::bip: '198.18.69.254/24'
diff --git a/hieradata/roles/infra/dns/resolver.yaml b/hieradata/roles/infra/dns/resolver.yaml
index a98a6de..f39588c 100644
--- a/hieradata/roles/infra/dns/resolver.yaml
+++ b/hieradata/roles/infra/dns/resolver.yaml
@@ -15,6 +15,9 @@ profiles::dns::resolver::acls:
       - 198.18.64.0/24
       - 198.18.65.0/24
       - 198.18.66.0/24
+      - 198.18.67.0/24
+      - 198.18.68.0/24
+      - 198.18.69.0/24
 
 profiles::dns::resolver::zones:
   8.10.10.in-addr.arpa-forward: